Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa
File:                     8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa (raw, json)
Hash identifier:          Xmf1fYEvRSrdOjLvbmrkjl1AZE6w+77nvst+2sEgMNw=
Subject key identifier:   9D:6A:94:AA:2A:CA:2F:A2:E6:DD:B6:63:79:11:E1:64:FF:49:85:6A
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F43285849AD1A0ECAC4E763B47BFDE180
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     393262
IP address blocks:        192.111.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:0e:ca:c4:e7:63:b4:7b:fd:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=9227ffd7-5060-4951-a32e-2870987f8786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:66:86:9d:4d:fb:30:09:db:8b:57:0f:69:48:
                    2c:46:3a:86:41:36:ac:d5:82:9e:d0:3f:be:78:2e:
                    06:5a:9b:44:d1:85:cd:36:a2:1d:83:71:fe:34:8f:
                    fd:02:7e:d8:7e:2b:4c:f7:5f:75:85:d4:20:03:d5:
                    32:94:a6:e9:03:07:dd:53:c0:8d:d1:a6:25:cd:5a:
                    52:47:92:bd:68:e3:60:01:21:da:70:da:73:8a:b8:
                    10:2f:cc:2a:91:23:63:e2:47:3a:00:68:fc:cf:a8:
                    28:31:ea:75:16:5a:1e:99:5f:c4:59:c9:8f:cc:d5:
                    fe:3f:41:ab:62:01:93:ec:c5:d3:54:b1:7b:44:d7:
                    07:c2:67:ae:14:eb:6c:50:c6:c5:8a:c6:ed:c7:0f:
                    fd:25:7f:10:eb:96:b6:f5:d3:88:47:d0:43:af:21:
                    0d:fb:1e:21:22:2e:44:9a:fe:28:4e:97:38:5e:0f:
                    a0:98:2e:2d:d9:6f:3f:a5:d6:6d:ec:28:ee:62:a3:
                    ef:86:6a:f7:83:ac:f0:19:a4:76:4a:8a:15:e2:68:
                    b8:a7:9a:61:2b:cc:ec:7b:dd:4f:c1:11:a1:35:e2:
                    b9:6d:42:9b:3e:36:f7:52:97:42:ad:15:ed:c7:2b:
                    61:a0:4e:30:e3:ed:97:d9:32:10:22:7f:9e:82:de:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:94:AA:2A:CA:2F:A2:E6:DD:B6:63:79:11:E1:64:FF:49:85:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/8ac80b4a-7017-39b9-83f3-9d3bd48c3740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5b:bc:dc:4b:dc:fc:85:8c:ec:4c:18:88:41:88:0d:ed:55:
         d2:ab:c8:7a:a6:aa:97:6d:3f:39:97:f0:c3:b6:14:4e:e2:d5:
         71:0d:35:2a:cd:29:54:c5:48:15:b5:f8:9c:3f:a2:db:37:52:
         c9:23:fd:ea:78:ce:56:92:5e:09:32:1a:13:f1:da:8a:02:b5:
         0e:f8:31:ce:f5:07:0a:6d:ee:d8:47:ef:69:ca:7d:14:ff:0a:
         c1:53:a3:89:b6:85:03:ce:a1:29:4a:42:1d:7a:9e:41:9e:42:
         b8:06:6d:88:9a:bc:69:4d:88:36:0b:0f:6b:9b:40:f0:68:fc:
         85:25:72:43:b1:01:4b:cb:db:cc:b6:a7:a5:a3:22:7f:e6:e8:
         93:c2:3a:73:f6:b9:44:aa:b1:71:bd:a7:a6:13:5b:69:2b:5a:
         a1:64:9d:5d:76:99:ff:09:dc:40:c6:4f:34:00:21:2d:0b:20:
         30:5d:60:eb:61:f7:34:a0:3b:30:c2:5d:c0:2b:3f:2c:7f:c6:
         87:60:9d:4b:c6:a5:48:ec:4d:49:a9:e5:3c:b5:cb:28:d7:0e:
         0e:1e:0a:9e:37:f0:e8:55:d7:dd:85:a6:0b:83:31:ad:a6:88:
         d1:c7:4a:f7:4b:e9:2f:ae:cd:d8:de:12:a6:2c:1e:14:1a:dc:
         12:1a:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:07:51 2025 by rpki-client